Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IzdlFJLxcBmS5W7jHHaYruK_9tk.roa
File: IzdlFJLxcBmS5W7jHHaYruK_9tk.roa (raw, json)
Hash identifier: rmQK7TDkW/pnTDBeyVRtZLipi7uhEcEbQFNF77axKjg=
Subject key identifier: 23:37:65:14:92:F1:70:19:92:E5:6E:E3:1C:76:98:AE:E2:BF:F6:D9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0186C788210CEAF6D17C7A2DD98CB8CC2374
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IzdlFJLxcBmS5W7jHHaYruK_9tk.roa
Signing time: Thu 09 Mar 2023 18:00:32 +0000
ROA not before: Thu 09 Mar 2023 18:00:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205264
IP address blocks: 93.170.75.0/24 maxlen: 24
93.170.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:88:21:0c:ea:f6:d1:7c:7a:2d:d9:8c:b8:cc:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 9 18:00:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2337651492f1701992e56ee31c7698aee2bff6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:d4:92:00:3a:c2:2f:c2:fb:14:8d:87:93:
fa:2c:4c:3f:e6:4d:cc:27:e2:be:99:5e:cd:fe:34:
40:c7:e4:78:5f:14:98:5b:17:84:6b:07:29:c5:e6:
fe:8c:96:22:bf:b9:a4:0f:11:02:6b:e7:35:db:a6:
9e:85:bb:fc:ce:e2:d5:91:4d:ec:d6:a6:27:cc:a7:
4f:77:71:1a:cb:2b:87:2d:0a:0d:fb:cb:7d:fe:70:
99:ed:03:58:f8:bc:63:2c:68:96:f6:cb:d3:b6:cc:
f8:10:ff:06:53:59:ae:db:3a:6d:45:c0:9c:03:ac:
ec:90:ba:85:ee:e8:7d:fc:d1:39:27:e2:5d:8b:3e:
db:91:1d:b7:b8:2e:13:15:f9:d1:c8:1e:2b:63:72:
7a:ac:f3:a3:2a:66:bc:99:38:d2:f4:dd:07:26:58:
00:6a:ef:8c:71:dc:67:f9:f0:9c:4c:1c:7c:de:c2:
19:ff:10:ac:dc:d6:39:2c:72:c0:b5:9c:dd:3e:e6:
e7:b7:dd:6d:2a:9a:96:9e:c5:09:84:2e:ba:09:77:
0b:20:17:65:a2:ae:81:88:cf:6a:4f:c2:bb:2b:f4:
9c:f0:3c:b2:fc:01:2e:00:f3:9c:e1:f3:86:99:9a:
69:43:56:35:5b:9b:06:e8:c7:9a:59:36:54:f8:67:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:37:65:14:92:F1:70:19:92:E5:6E:E3:1C:76:98:AE:E2:BF:F6:D9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IzdlFJLxcBmS5W7jHHaYruK_9tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.74.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:a6:04:ce:50:7f:dd:0f:73:56:a2:17:4c:03:be:87:f3:68:
72:a7:45:77:2b:27:27:71:fc:86:e9:7c:9b:10:0f:fe:9c:12:
14:8e:48:d8:21:71:c8:43:32:5c:6e:62:81:d1:b6:b6:a5:36:
e1:c8:d3:be:3c:fa:f3:07:c2:94:73:32:58:d7:9e:60:0f:7b:
57:10:1c:3e:78:3a:c1:70:14:d0:40:00:e0:84:c5:f3:73:bf:
13:ca:95:de:b1:48:d1:43:57:f9:79:6f:54:77:dd:37:93:b0:
3b:65:ec:73:79:b8:db:4e:4f:63:89:48:ba:a3:0e:1d:b2:90:
49:27:c9:a0:d9:8c:2a:5f:05:2b:38:cc:7e:ee:2e:00:2c:71:
29:3d:46:66:44:4d:eb:15:bb:9d:1e:79:5d:17:2a:45:f4:9c:
c5:e7:5d:0b:0b:7d:a8:1a:1b:3d:af:cf:2b:4b:f1:77:94:58:
9f:6c:39:d0:e1:c5:ba:47:a6:5e:2c:cc:78:46:12:d3:6d:2f:
6c:ab:8e:bf:d8:1e:61:fd:05:04:a3:7b:e5:3b:64:b4:56:36:
93:0d:03:1a:90:91:a2:32:b9:f5:1f:6b:f4:da:95:d6:57:ab:
eb:f3:f4:50:ad:eb:da:d8:1c:2a:f1:08:95:fd:eb:50:f3:f7:
b9:fc:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:04 2025 by rpki-client